authentication library

Optional authentication APIs. Import only when needed.

Classes

AuthenticationInterceptor

Adds bearer credentials only to allowed origins and retries one eligible 401. Share its coordinator within one authenticated session; writes require opt-in.

TokenProvider

Scope providers to one user/session. Refresh must honor cancellation.

TokenRefreshCoordinator

Coalesces concurrent refreshes for one session. Canceling a caller stops its wait, while other callers retain the shared refresh.